Cyber Self Defense for Your Business

For businesses without a dedicated IT or security function. Includes a structured intake process, a one-on-one interview, a written assessment report with prioritized recommendations, and a report delivery conversation. 

Your assessment may cover additional ground if your business has dedicated IT staff or a security function, handles sensitive customer data, is subject to regulatory requirements, has contractual security obligations, or serves vulnerable populations. Scope and pricing are confirmed during intake before any work begins. 

Most businesses complete a BCHA and walk away with a clear picture of their gaps and a prioritized roadmap but no structured way to work through it. The CSD Program changes that. It is a structured, ongoing security program built for small and mid-sized businesses, one that maintains and improves your security posture over time, with a dedicated Advisor keeping your roadmap current and your priorities on track.  

The BCHA is the required starting point for all program tiers. If you have already completed a BCHA with Community Cyber, your $599 assessment fee applies as a credit toward your first program year if you enroll within 45 days of report delivery. 

For businesses that want a clear plan and consistent accountability. Foundation includes a 12-month action roadmap built from your BCHA findings, four structured quarterly review calls to track progress and adjust priorities, roadmap updates after each call, an annual reassessment BCHA at program year-end, and email access between calls for questions and quick guidance. 

Built for owners who want a structured program as the foundation for long-term security.

Everything in Foundation, plus monthly check-in calls, active roadmap maintenance between calls, a one-business-day email response commitment, two advisory hours per month for security policy work, incident response planning, tabletop exercises, and advisory questions outside the roadmap, one annual Lunch and Learn, and incident guidance through the first 24 to 48 hours of an event.

Built for businesses that want consistent engagement throughout the year, not just quarterly checkpoints.

An engaging, plain-English session built around the threats your team actually faces. Core topics include social engineering, email and web safety, safe habits at work, and what to do when something goes wrong. Sessions are tailored to your industry and your team's specific risks. 

Developing security policies, evaluating tools and vendors, building a security awareness practice for your team, incident response planning and preparation, and other business cybersecurity needs. 

Pre-purchase advisory time and use it on your schedule. A good fit for one-time projects, specific questions, or any situation where you need expert input without an ongoing commitment.